CVE-2026-73537 — Japan Science and Technology Agency (JST) / Miraikan Assist App Android version

CVE-2026-73537

Japan Science and Technology Agency (JST) / Miraikan Assist App Android version PUBLISHED

Description (CNA)

Cross-site scripting vulnerability exists in Miraikan Assist App. If this vulnerability is exploited, an arbitrary script may be executed in the browser component (WebView) running on the affected product, resulting in the displayed content being altered.

Affected (CNA)

Vendor / product	Versions
Japan Science and Technology Agency (JST) / Miraikan Assist App Android version	affected 0 before 1.1.7
Japan Science and Technology Agency (JST) / Miraikan Assist App iOS version	affected 0 before 1.0.7

CWE

CWE-79

References

https://www.miraikan.jst.go.jp/en/news/general/202608194709.html
https://jvn.jp/en/jp/JVN09266484/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.